Istio 1.14 release

On the eve of Dragon Boat Festival ,Istio 1.14 Release .

This is a 2022 The second in Istio edition . We want to thank the whole Istio The community is right Istio 1.14.0 Published help . Special thanks to the release manager Lei Tang（ Google ） and Greg Hanson（Solo.io）, And the test and release team leader Eric Van Norman（IBM） Continuous help and guidance .

Istio 1.14.0 Formal support Kubernetes 1.21 to 1.24 edition .

Here are some highlights of this version .

Yes SPIRE Runtime support

SPIRE yes SPIFFE A production ready implementation of the specification , It provides pluggable multi factor verification and SPIFFE The federal . We use Envoy SDS API The integration mode with external certification authorities has been modified , To achieve the right SPIRE Support for . Thanks to the HP enterprise team for their contribution to this work ！SPIRE By using a combination of different authentication mechanisms , It realizes the introduction of strong authentication identity . It's for Kubernetes、AWS、GCP、Azure、Docker Workloads running in provide various nodes and workload proofs , And through the plug-in oriented architecture , It can also use custom certificates . The project has a pluggable integration with the customized key management system , Used to store CA Private key , And through the upstream certificate authority plug-in to realize the connection with the existing PKI Integration of .SPIRE Realized SPIFFE The federal , Enable the workload to pass through Federation API Trust peers in different trust domains in a configurable and flexible way .

For more information , Check out HP enterprise and Solo.io Team file And this video .

Add automatic SNI Support

Some servers require that the request include SNI. This new feature can be automatically configured SNI, There is no need for users to manually configure or use EnvoyFilter resources . For more information , Please check out PR 38604 and PR 38238.

Add to the configuration Istio Workload TLS Version support

TLS Version is important for security . This new feature adds to the configuration Istio Minimum workload TLS Version support . For more information , Please check out file .

Telemetry improvement

We are right. Telemetry API A series of improvements have been made , Including support OpenTelemetry Access records 、 be based on WorkloadMode Filtering, etc .

Upgrade to 1.14

When you upgrade , We hope to hear your voice ！ Please take a few minutes to fill in this short survey , Let's see how we are doing .

You can also be in Discuss Istio Join the conversation , Or join us Slack. You want to work directly for Istio Make a contribution ？ Find and join our team , Help us improve .

IstioCon summary

IstioCon This year is the second session , On 4 month 25-29 Saturday, . We have near 4000 Registered participants , Satisfaction is 4.5/5. The meeting was held in English and Chinese , There are people from all over the world 120 People from countries joined . stay 2022 year 4 month , That is, the month in which the meeting is held ,istio.io On 81% Is the first time that the user of . We will be in events.istio.io Share more detailed activity reports on .

CNCF Journalism

We are pleased to see that we have announced that we will Istio Donate to CNCF Reaction after . We are trying to develop applications , I hope there will be more content to share in the coming months .